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REMARKS 

Please reconsider the application in view of the above amendments and the following 
remarks. Applicant thanks the Examiner for courtesies extended during the Examiner Interview 
conducted on October 6, 2005. 

Disposition of Claims 

Claims 1-5 and 7-26 are currently pending in this application. Claims 1, 7, 15, and 24 
are independent. The remaining claims depend, directly or indirectly, from claims 1, 7, 15, and 
24. 

Claim Amendments 

Independent claims 1, 7, 15, and 24 have been amended to clarify the invention recited in 
the claims. Specifically, claims 1, 15, and 24 have been amended to clarify that the unique 
authentication parameters include at least one of the following: (i) a browser type executing on 
the wireless client, (ii) a type of operating system executing on the wireless client, (Hi) a version 
of the browser executing on the wireless client, and (iv) a bandwidth of the wireless client. 
Claim 7 has also been amended to clarify that the particular client type used to select an 
authentication module is determined using at least one of the aforementioned types of unique 
authentication parameters. Support for the aforementioned amendments may be found, for 
example, in paragraphs [0024], [0046], and [0047] of the published application corresponding to 
the instant application (i.e., US Patent Application Publication No. 2003/0033356). No new 
matter has been added by any of the aforementioned amendments. 
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Rejection(s) under 35 U.S.C. § 103 

Claims 1-5, 7, 8, 15, 16, and 24-26 stand rejected under 35 U.S.C. 103(a) as being 
unpatentable over U.S. Patent Publication No. 2002/0068554 ("Dusse") in view of the article 
entitled "Unified Login with Pluggable Authentication Modules" ("PAM"). To the extent that 
this rejection may still apply to the amended claims, this rejection is respectfully traversed. 

To establish a prima facie case of obviousness "...the prior art reference (or references 
when combined) must teach or suggest all the claim limitations." (See MPEP §2143.03). 
Further, "all words in a claim must be considered in judging the patentability of that claim 
against the prior art." (See MPEP §2143.03). The Applicant respectfully asserts that the 
references, when combined, fail to teach or suggest all the claim limitations of the amended 
independent claims. 

The present invention, as recited in the claims, focuses on authenticating wireless devices 
based on the class of wireless client (i.e., what class of wireless client does the device 
correspond to), where different authentication modules are invoked based on the class of 
wireless client. Thus, in the present invention, when a device attempts to access the system, the 
system determines the class of wireless client using parameters associated with the device (e.g., 
a browser type executing on the wireless client, a type of operating system executing on the 
wireless client, a version of the browser executing on the wireless client, and a bandwidth of the 
wireless client). Once the class of wireless client has been determined, then the appropriate 
authentication module is invoked. Once the appropriate authentication module has been 
invoked, authenticating using the appropriate authentication module is performed. 

As admitted by the Examiner on page 3 of the Office Action mailed July 14, 2005, Dusse 
fails to disclose or suggest a plurality of authentication modules. Further, as discussed during 
the Examiner Interview, Dusse only discloses one authentication mechanism for authenticating 
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an individual device. In particular, Dusse discloses a mechanism for authentication of a device 
using a device ID, where the device ID is used to identify the particular device and to open a 
user account associated with the device. The user account associated with the device includes 
authentication information to allow the system to authenticate the device and the user of the 
device. (See Dusse, paragraphs [0037] and [0047]). Thus, the information tracked in Dusse has 
nothing to do with the class of the device generally, but focuses rather on the individual device 
itself (i.e., the specific ID of the device). 

Further, because Dusse is completely silent with respect to authenticating different 
classes of wireless clients using unique authentication parameters, Dusse cannot possibly 
disclose the use of a browser type, operating system type, bandwidth, or browser version of the 
wireless client to authenticate the wireless client. 

Moreover, PAM fails to supply that which Dusse lacks. This is evidenced by the fact 
that the Examiner only relies upon PAM to teach "a plurality of authentication modules" (See 
Office Action mailed July 14, 2005, p. 3). As discussed during the Examiner Interview of 
October 6, 2005, PAM discloses a plurality of authentication modules, each of which is invoked 
depending on the application (e.g. t telnet and ftp) that is attempting to access the system. (See 
PAM, Figure 1 and accompanying text). In contrast, as discussed above, the present invention 
invokes a particular authentication module based on the class of wireless client, and not based on 
the type of application executing. 

Even assuming arguendo that PAM discloses invoking the appropriate authentication 
module based on the class of wireless client, PAM fails to teach or suggest, determining the 
class of wireless client using specific authentication information including browser version, 
browser type, bandwidth, and/or the operating system type of the wireless client. 
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In addition, Applicant asserts that there is no motivation to combine the teachings of 
Dusse and PAM to achieve the claimed invention. The Examiner cannot combine prior art 
references to render a claimed invention obvious by merely showing that all the limitations of 
the claimed invention can be found in the prior art references. Instead, there must a suggestion 
or motivation to combine the references within the prior art references themselves. In other 
words, regardless of whether prior art references can be combined, there must an indication 
within the prior art references expressing desirability to combine the references. In re Mills, 916 
F.2d 680 (Fed. Cir. 1990) (emphasis added). Further, the present application cannot be used a 
guide in reconstructing elements of prior art references to render the claimed invention obvious. 
In re Vaeck, 947 F.2d 488 (Fed. Cir. 1991) (emphasis added). In the present case, there is no 
expression of desirability in either Dusse or PAM that would cause one skilled in the art to turn 
to the teachings of the other. 

Specifically, as described above, Dusse fails to contemplate multiple authentication 
mechanisms. In fact, Dusse only appears to contemplate the use of single authentication 
module. Thus, if the type of device in Dusse changes, then the authentication mechanism used 
in Dusse remains the same. Further, there is nothing in Dusse that allows one skilled in the art to 
leverage the plurality of authentication modules disclosed in PAM because Dusse does not store 
or keep track of any information, other than the device ID of an individual device, that would 
allow one skilled in the art to leverage multiple authentication modules to authenticate different 
classes of wireless clients. Further, PAM lacks any suggestion or motivation to be combined 
with Dusse as PAM only relates to authentication based on executing applications and not on 
devices or classes of devices. 

In view of the above, it is clear that amended independent claims 1, 7, 15, and 24 are 
patentable over Dusse and PAM, whether considered separately or in combination. Dependent 
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claims are patentable for at least the same reasons. Accordingly, withdrawal of this rejection is 
respectfully requested. 

Claims 9-12 and 17-23 stand rejected under 25 U.S.C. 103(a) as being unpatentable over 
Dusse in view of PAM, and further in view of U.S. Patent No. 6,606,663 ("Liao"). To the extent 
that this rejection may still apply to the amended claims, this rejection is respectfully traversed. 

As described above, both Dusse and PAM, alone or in combination, fail to teach the 
limitations of the amended independent claims. Further, Liao fails to supply that which Dusse 
and PAM lack. This evidenced by the fact that the Examiner only relies on Liao to teach that 
service requests comprises header information, including HTTP headers, used to detect the 
particular client type, and to teach that authentication information is transmitted to the server in 
an authentication credential stored within the headers (See Office Action mailed July 14, 2005, 
p. 10). In view of the above, amended independent claims 7 and 15 are patentable over Dusse, 
PAM and Liao whether viewed separately or in combination. Dependent claims 9-12 and 17-23 
are patentable for at least the same reasons. Accordingly withdrawal of this rejection is 
respectfully requested. 

Claims 13 and 14 stand rejected under 35 U.S.C. 103(a) as being unpatentable over 
Dusse in view of PAM, and further in view of "iPlanet Portal Server Administrator Guide," 
Chapter 6 ("iPlanet"). To the extent that this rejection may still apply to the amended claims, 
this rejection is respectfully traversed. 

As described above, Dusse and PAM, alone or in combination, fail to teach the 
limitations of amended independent claim 7. Further, iPlanet fails to provide that which Dusse 
and PAM lack. This is evidenced by the fact that the Examiner only relies on iPlanet to teach 
particular authentication modules (i.e., a securlD module, safeword module, Microsoft 
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Windows/NT module, membership module, LDAP authentication module, RADIUS 
authentication module) (See Office Action mailed July 14, 2005, p. 14-15). 

In view of the above, amended independent claim 7 is patentable over Dusse, PAM and 
iPlanet whether viewed separately or in combination. Dependent claims 13 and 14 are 
patentable for at least the same reasons. Accordingly withdrawal of this rejection is respectfully 


Applicant believes this reply is fully responsive to all outstanding issues and places this 
application in condition for allowance. If this belief is incorrect, or other issues arise, the 
Examiner is encouraged to contact the undersigned or his associates at the telephone number 
listed below. Please apply any charges not covered, or any credits, to Deposit Account 50-0591 


requested. 


Conclusion 
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